pki with keystone

hi i am trying to set up pki with keystone . i am using ubuntu 12.04 for my openstack deplyoment. i have generated self sign certificate and enable ssl for web server. i also generate bot key for and follow the instruction from http://docs.openstack.org/developer/keystone/configuration.html . now when i source my keystonerc and run keystone user-listi get the following error
keystone user-list
No handlers could be found for logger "keystoneclient.client"
Authorization Failed: Unable to communicate with identity service: [Errno 111] Connection refused. (HTTP 400)